AI AgentHigh
CVE-2026-82293: Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized re…
- Occurred
- Sep 2, 2026
- Published
- Sep 2, 2026
- Source
- NVD CVE
Summary
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user could invoke machine learning functionality beyond their authorization scope, consuming cluster resources they should not be able to reach.
Tags
- CVE
- CVE-2026-82293
- cvss:MEDIUM
- agent-fail:authorization
- agent-cause:config-error
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Unauthorized resource consumption via incorrect authorization in ML feature exceeds agent scope.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8